{"id":"PLT-003","section":"Platform, Privacy & Assurance","requirement":"Deploy silently through endpoint management with release controls","acceptance":"Deploy and update every component silently through the buyer's endpoint management tools on Windows, macOS and Linux and all major browsers, with release rings, version pinning, rollback and a central view of deployment health by device.","tier":"AT0–AT4","whyItMatters":"Deployment is where enterprise controls most often fail.","verificationMethod":"POV","verificationTest":"Pilot devices are deployed silently through your endpoint management, with deployment health visible.","formerly":"ARC-016","alsoIn":[],"sort":57,"adoptionContext":"Endpoint components underpin coverage in every listed context, so deployment health determines real coverage.","mappings":[{"frameworks":["csf","soc2","iso27001"],"explanation":"Managed deployment with release rings, pinning and rollback brings the control's own software under change and configuration management. Deployment health still has to be monitored; an install that fails silently does not meet this requirement.","kind":"framework","references":{"csf":["PR.PS-02","ID.AM-08"],"soc2":["CC8.1"],"iso27001":["A.8.32","A.8.9"]},"relation":null,"conditions":[]},{"frameworks":["rmf","iso"],"explanation":"Staged releases and rollback let the buyer contain a faulty update without losing protection everywhere. They are deployment safeguards, not evidence that each release is correct.","kind":"framework","references":{"rmf":["MANAGE 2.4"],"iso":["A.6.2.5"]},"relation":null,"conditions":[]}],"area":"Platform, Privacy & Assurance","areaSlug":"PLT","url":"/r/PLT-003","frameworkRefs":{"ISO27001":["A.8.32","A.8.9"],"ISO42001":["A.6.2.5"],"NIST-CSF":["PR.PS-02","ID.AM-08"],"NIST-AI-RMF":["MANAGE 2.4"],"SOC2":["CC8.1"]}}